Strange Activity

Norton Security | Norton Internet Security
1

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

2

Might anyone from Norton give this a look over? I know I’m annoying, but trying to learn about all this to reduce the paranoia and anxiety. Thanks all

3

Do you see any ip adress in the logs? With that you can find out where it is coming from.

Doesn't have to be dangerous

Message Edited by Stu on 07-26-2008 07:37 AM
4

I'm running NAV2008 on a Vista Home premium with DSL connection.

 

In my NAV2008 Activity log, I'm showing the follwing

 

Port Blocking allowed 192.16*.*.*   ( I left out the numbers to maintain some seciurity)

 

This reading happens every 4-5 minutes and has so since last Summer. Does this sound like something dangerous? Or is it part of my DSL connection. When I look up the address  on webyield.net it shows

 

"no reverse DNS for this IP

 

whois.net shows

OrgName:    Internet Assigned Numbers Authority 
OrgID:      IANA
Address:    4676 Admiralty Way, Suite 330
City:       Marina del Rey
StateProv:  CA
PostalCode: 90292-6695
Country:    US

NetRange:   192.168.0.0 - 192.168.255.255

CIDR:       192.168.0.0/16

NetName:    IANA-CBLK1

NetHandle:  NET-192-168-0-0-1

Parent:     NET-192-0-0-0-0

NetType:    IANA Special Use

NameServer: BLACKHOLE-1.IANA.ORG

NameServer: BLACKHOLE-2.IANA.ORG

Comment:    This block is reserved for special purposes.

Comment:    Please see RFC 1918 for additional information.

Comment:    http://www.arin.net/reference/rfc/rfc1918.txt

RegDate:    1994-03-15

Updated:    2007-11-27

5

I'm a bit lost....   would you go ahead and post a portion of the log your seeing...  don't worry about the security of IP addresses that start with 192.168.x.x. go ahead and leave those alone in the log....  addresses in the 192.168.x.x range are local network addresses and do not identify you in anyway... remove tho part of any other IP address just as you did....

6

I know that my Norton blocks out some connections, so its not taht it is wide open.